Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AkSznoKYC3fQznLfXHMb3-v_Tqg.roa
File: AkSznoKYC3fQznLfXHMb3-v_Tqg.roa (raw, json)
Hash identifier: LcT6zl5KUwzA+JIJpOXqWUjMraluGUKPIZf1lkDYSi4=
Subject key identifier: 02:44:B3:9E:82:98:0B:77:D0:CE:72:DF:5C:73:1B:DF:EB:FF:4E:A8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D2519C533679AFEFCE7F41A79A3CB61E6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AkSznoKYC3fQznLfXHMb3-v_Tqg.roa
Signing time: Wed 25 Mar 2026 13:05:39 +0000
ROA not before: Wed 25 Mar 2026 13:05:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:19:c5:33:67:9a:fe:fc:e7:f4:1a:79:a3:cb:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 25 13:05:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0244b39e82980b77d0ce72df5c731bdfebff4ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:50:c0:f6:c2:5f:00:35:05:fb:fb:12:37:
69:7a:9d:6c:07:82:93:a9:ff:bf:3a:16:a5:84:60:
80:90:21:72:2e:67:4b:c7:cc:e8:93:47:eb:2d:49:
db:af:05:fb:c1:2f:21:6d:51:8a:44:57:73:9a:69:
c3:5c:2e:e1:d3:dc:73:ff:93:80:16:60:11:b3:79:
61:4c:cd:c0:27:11:de:7d:b9:80:14:7e:e1:84:43:
6a:59:74:a4:77:be:1b:4f:aa:ab:73:2b:61:d3:6f:
52:70:f7:d7:ec:64:a7:f5:35:12:ac:c2:fa:b9:74:
e5:9f:3b:d2:61:bd:18:95:57:d4:19:4e:b7:53:1c:
84:eb:9f:e9:56:41:83:3f:f5:bf:41:ca:cf:a3:7f:
db:fd:a2:12:a0:61:39:22:6d:ee:db:a5:87:a7:c3:
68:72:c5:4f:31:47:cb:17:d7:f0:34:36:40:6b:54:
78:51:ae:d1:2b:d6:f1:8a:84:99:ba:de:93:49:e4:
c3:f9:26:b3:fa:f3:30:5f:b1:76:bd:8d:35:ce:69:
94:28:9b:c8:0e:c7:7d:3b:61:1f:8c:10:20:93:fc:
c3:02:25:55:33:68:94:0c:f8:42:ed:d2:b9:0d:cc:
18:e9:d7:64:33:d3:55:77:f3:2e:76:65:0a:86:12:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:B3:9E:82:98:0B:77:D0:CE:72:DF:5C:73:1B:DF:EB:FF:4E:A8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AkSznoKYC3fQznLfXHMb3-v_Tqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3d:69:7c:74:b4:8a:bd:e8:f2:7e:78:32:62:39:70:62:80:
0b:1d:6a:8b:05:38:0b:14:07:25:42:0e:82:6f:58:ed:b3:9a:
3c:2d:04:b7:06:10:3b:a5:3d:4d:7b:7d:6e:84:42:ff:62:06:
e5:b1:6c:05:a6:97:05:45:04:e5:44:53:10:ef:ab:da:24:64:
da:0d:59:37:86:33:14:88:6b:a1:33:9a:23:34:f2:b9:7b:69:
f1:22:db:d4:43:5a:da:51:b5:88:49:5d:0f:07:7b:76:8f:77:
94:82:f4:8c:ee:c5:14:f2:b8:bf:b0:a5:6e:ba:fd:b1:90:0f:
31:6d:76:7e:9c:e3:e7:4c:e7:22:8c:7e:0a:be:89:c6:14:2c:
de:eb:94:a5:41:09:6d:c0:e7:67:26:8d:8b:18:82:7d:ec:db:
b4:c4:cc:e1:00:0e:3c:72:cd:32:c3:55:1f:07:cb:1f:72:52:
62:a6:bf:f2:55:b7:15:9d:b0:66:b3:17:6a:6e:18:d4:8f:ea:
29:81:11:a5:de:1f:36:f1:b7:87:92:88:b4:6f:2c:e8:02:64:
cf:8c:d8:9e:21:f4:25:74:b4:0e:1e:59:4d:1b:5a:5b:eb:23:
73:80:82:d1:43:66:d6:70:29:58:5a:54:bc:1d:46:e8:c5:db:
06:c2:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:01 2026 by rpki-client